added controllers and views and crap
added a bunch of permissions